FIBIKO uses only strictly necessary cookies. There are no analytics, advertising or third-party tracking cookies, and nothing here needs your consent under the ePrivacy rules — but you should still know what is set and why.
| Cookie | What it does | Kept for |
|---|---|---|
| fibiko_admin_session | Keeps you signed in and tells the server your role. httpOnly and signed, so it cannot be read or altered by scripts in your browser. | 30 days, or until you sign out |
| fibiko_locale | Remembers which language you chose, so the site does not reset to English on every visit. Holds a language code and nothing else. | 1 year |
| fibiko_passkey_challenge | Only while you sign in with Face ID or a fingerprint: holds the one-time challenge your device signs, so its answer can be checked. httpOnly and signed. | 5 minutes, or until that sign-in finishes |
| fibiko_social_* | Only when the owner starts a social-account connection: binds the OAuth response to this browser. HttpOnly, Secure and SameSite=Lax; contains a random one-time value, never a social password or access token. | 10 minutes, or until the callback completes |
Clearing these in your browser signs you out and forgets your language choice. Chart preferences, drawings, sizing defaults and education reading progress are stored separately in browser local storage until you clear them. Reading progress and chart display choices use your account identifier on this device. Social providers apply their own notices when you leave FIBIKO to approve a connection.